Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-20 Thread Richard Pieri
On 11/20/2014 7:35 AM, Bill Bogstad wrote: You are interpreting Rich's email differently than I suspect he intended. Or at least differently then I interpreted it. Certainly possible, and it wouldn't be the first time. -- Rich P. ___ Discuss mailing

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-20 Thread Edward Ned Harvey (blu)
> Go jump off a cliff. Everyone else is doing it; why haven't you? :) * COUGH * * COUGH * troll bait *COUGH* *COUGH* I agree with Rich Braun: > Why not > embrace these technologies before one's old habits become obsolete, and > gradually limit career options? ___

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-20 Thread Bill Bogstad
On Wed, Nov 19, 2014 at 8:42 PM, Richard Pieri wrote: > On 11/19/2014 1:40 PM, Rich Braun wrote: >> >> And another reason for my head being in the clouds on this one (yeah, I >> love >> that Cloud buzzword): getting in the daily habit of something the business >> world's already doing > > > Go jum

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-19 Thread Richard Pieri
On 11/19/2014 1:40 PM, Rich Braun wrote: And another reason for my head being in the clouds on this one (yeah, I love that Cloud buzzword): getting in the daily habit of something the business world's already doing Go jump off a cliff. Everyone else is doing it; why haven't you? :) Because jum

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-19 Thread Rich Braun
Richard Pieri notes my head-in-clouds idealism: > It isn't an idealistic "encrypt > everything and the world will be better" philosophy. It's a specific > reason to take specific action. That is, it's a specific threat And another reason for my head being in the clouds on this one (yeah, I love t

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-18 Thread Richard Pieri
On 11/18/2014 1:09 PM, Greg Rundlett (freephile) wrote: So, if you want business insurance (general liability, I'm not even talking about a "data breach" policy), then you will encrypt your backups. Assuming you need business insurance and this is a requirement for your policy then by all mean

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-18 Thread Greg Rundlett (freephile)
On Wed, Nov 5, 2014 at 3:30 PM, Edward Ned Harvey (blu) wrote: > > From: discuss-bounces+blu=nedharvey@blu.org [mailto:discuss- > > bounces+blu=nedharvey@blu.org] On Behalf Of Matthew Gillen > > > > Not everyone can have a bank vault to put their computers in. > > Even fewer can put their

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-06 Thread Richard Pieri
On 11/6/2014 7:02 AM, Edward Ned Harvey (blu) wrote: No, that's the opposite of what RP said. He said encryption is an unnecessary complexity and the only thing that matters is physical security. No, that's not what I wrote. -- Rich P. ___ Discuss m

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-06 Thread Edward Ned Harvey (blu)
> From: Bill Ricker [mailto:bill.n1...@gmail.com] > > So yes, backups that aren't encrypted may be a problem EVEN IF NO ONE > WANTS YOUR DATA. > > Darn, I'm agreeing with R.P. again ... No, that's the opposite of what RP said. He said encryption is an unnecessary complexity and the only thing

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-05 Thread Bill Ricker
On Wed, Nov 5, 2014 at 3:30 PM, Edward Ned Harvey (blu) wrote: > Even fewer can put their backup media into a locked vault which is inside > their secure server closet and then transported, still locked to the bank > vault, which is then locked during the transport into the safe box. On-site ba

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-05 Thread Edward Ned Harvey (blu)
> From: discuss-bounces+blu=nedharvey@blu.org [mailto:discuss- > bounces+blu=nedharvey@blu.org] On Behalf Of Matthew Gillen > > Not everyone can have a bank vault to put their computers in. Even fewer can put their backup media into a locked vault which is inside their secure server clos

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-05 Thread Matthew Gillen
On 11/04/2014 10:27 AM, Richard Pieri wrote: The encrypt everything ideology is nothing more than security theater: do something that provides a warm and fuzzy feeling without addressing the real problem of poor or nonexistent physical security. If you maintain good physical security then the dev

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-04 Thread Richard Pieri
On 11/4/2014 7:07 AM, Edward Ned Harvey (blu) wrote: Rich P apparently likes trolling and thinks there can only be one solution for everyone, and everyone who disagrees with him is wrong What is the popular solution to notebook computers with sensitive information on them being lost or stolen?

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-04 Thread Bill Ricker
Separate issue on VMware backups mentioned on today's SANS Internet Storm Center daily net-sec podcast. https://isc.sans.edu/podcastdetail.html?id=4221 VMWare Change Block Tracking problem may lead to corrupt backups http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-04 Thread Edward Ned Harvey (blu)
> From: discuss-bounces+blu=nedharvey@blu.org [mailto:discuss- > bounces+blu=nedharvey@blu.org] On Behalf Of Rich Braun > > Additional layers of security, whether "necessary" or not, are worthy of > discussion. Encryption is pretty darned easy to use, doesn't add burdensome > complexity

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-03 Thread Richard Pieri
On 11/3/2014 1:53 PM, Rich Braun wrote: Additional layers of security, whether "necessary" or not, are worthy of discussion. Encryption is pretty darned easy to use, doesn't add burdensome complexity (depending on the tool you select), Backing up encrypted desktops and notebooks is a pain in t

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-03 Thread Rich Braun
Richard Pieri > Physical security comes first. Encryption is no substitute for physical > access controls. Agreed. They are two separate layers of security. You can do one, or the other, or both, or neither. You decide. > If you refuse to maintain physical control over your > data and equipmen

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-02 Thread Richard Pieri
On 11/2/2014 12:34 PM, Rich Braun wrote: You ignored my own point about the unnecessary complexity of mobile phones (for 99.99% of users). It's a f'ing red herring. Repeat. Most users aren't exposed to the complexity inside a smart phone. When you go about encrypting your backups you are exp

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-02 Thread Rich Braun
Richard Pieri wrote: > And you've completely missed the point. Whatever...I think you enjoy saying that to me... :-) > I wrote "anything that adds unnecessary complexity". You ignored my own point about the unnecessary complexity of mobile phones (for 99.99% of users). It's a f'ing red herring

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-01 Thread Richard Pieri
On 11/1/2014 5:07 PM, Rich Braun wrote: I resemble that remark. :-) By that I mean I've often been criticized for embracing complexity. Such criticisms are red herrings; the average Android phone is among the most-complicated devices invented by mankind, and its complexity goes well beyond the "n

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-01 Thread Rich Braun
Richard Pieri suggested: > [On encryption] I disagree in the general case. Anything that > adds unnecessary complexity to a backup system is a failure > begging to bite you. I resemble that remark. :-) By that I mean I've often been criticized for embracing complexity. Such criticisms are red he

Re: [Discuss] Revisiting VMWare ESX backup options

2014-11-01 Thread Edward Ned Harvey (blu)
> From: discuss-bounces+blu=nedharvey@blu.org [mailto:discuss- > bounces+blu=nedharvey@blu.org] On Behalf Of Rich Braun > > AES > encryption no longer adds meaningful overhead to your operations; it's > built-in to current-generation CPUs. I've spent a good amount of time benchmarking enc

Re: [Discuss] Revisiting VMWare ESX backup options

2014-10-31 Thread Jerry Feldman
On 10/31/2014 06:14 PM, Richard Pieri wrote: > On 10/31/2014 5:43 PM, Rich Braun wrote: >> One word on modern backup strategy: encryption. > > I disagree in the general case. Anything that adds unnecessary > complexity to a backup system is a failure begging to bite you. > I agree here. If you pro

Re: [Discuss] Revisiting VMWare ESX backup options

2014-10-31 Thread Richard Pieri
On 10/31/2014 5:43 PM, Rich Braun wrote: One word on modern backup strategy: encryption. I disagree in the general case. Anything that adds unnecessary complexity to a backup system is a failure begging to bite you. -- Rich P. ___ Discuss mailing l

Re: [Discuss] Revisiting VMWare ESX backup options

2014-10-31 Thread Rich Braun
One word on modern backup strategy: encryption. Cloud services like CrashPlan take care of this automatically; traditional tape-backup solutions usually didn't, in the past. I don't know anything about VMware-specific utilities (for VMs I just back up the instance like any other system, and make s

Re: [Discuss] Revisiting VMWare ESX backup options

2014-10-30 Thread Edward Ned Harvey (blu)
> From: discuss-bounces+blu=nedharvey@blu.org [mailto:discuss- > bounces+blu=nedharvey@blu.org] On Behalf Of Scott Ehrlich > > We have some new Dell rack servers running new installs of ESX 5.5 U1, > and looking to buy a redundant server to use as a backup for the > primary. It sounds lik

Re: [Discuss] Revisiting VMWare ESX backup options

2014-10-29 Thread Jerry Feldman
I think you need to compute the price per byte, and I agree with you that tape is more cost effective. Although I might use removable disk media if it were removable and would be stored. Also tapes are written and read serially (with the exception of the ancient DECTapes). For backup purposes, I al

Re: [Discuss] Revisiting VMWare ESX backup options

2014-10-29 Thread Richard Pieri
On 10/29/2014 2:54 PM, Nathan Burridge wrote: Have you looked into VMWare's Data Protection which is offered for free? Yeah... and I dismissed it based on the outright lies that make up the ad copy: "Traditional data backup and data recovery solutions are expensive, slow and complex." Fal

Re: [Discuss] Revisiting VMWare ESX backup options

2014-10-29 Thread Jack Coats
3-2-1 rule - 3 copies, on 2 different types of media, 1 copy offsite. That is the minimum. I have done 2 on disk (local in different disk pools on different machines), 1 on tape, 1 local, 1 offsite). For home, I am lazy. So it 'slightly' violates my own rules. OK if you consider 'cloud' a diff

Re: [Discuss] Revisiting VMWare ESX backup options

2014-10-29 Thread Richard Pieri
On 10/29/2014 11:04 AM, Scott Ehrlich wrote: What are your thoughts on product(s) to use for primary to backup and for options for off-site - cloud vs storage facility that gives us space on a system? Cloud is a non-starter. Megaupload. Code/Spaces. Not worth the risk. Magtape is the best bang

Re: [Discuss] Revisiting VMWare ESX backup options

2014-10-29 Thread Bob Dunphy
Another one to consider. I have user Trilead VM Explorer with good results. The things I like is there is no additional cost to do additional servers and it will do ESX, ESXi and Hyper-V. http://www.trilead.com/features/ The cost is reasonable at $1,390 - Thank you, *Bob Dunphy* - *Sr. System

[Discuss] Revisiting VMWare ESX backup options

2014-10-29 Thread Scott Ehrlich
We have some new Dell rack servers running new installs of ESX 5.5 U1, and looking to buy a redundant server to use as a backup for the primary. The budget is healthy enough for appropriate hardware and storage (likely a duplicate of the primary). The primary is very appropriate for its tasks.